The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-671380 advisory.

    [72.0.0-1.0.3]
    - Rebuild for CVE-2026-25681, CVE-2026-27136, CVE-2026-41178, CVE-2026-42502

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of runfinch-finch installed on the remote host is prior to 1.17.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2026-132 advisory.

    Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service.
    (CVE-2026-25680)

    Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can     be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.
    (CVE-2026-25681)

    Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can     be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.
    (CVE-2026-27136)

    The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-     only label. For example, ToUnicode(xn--example-.com) incorrectly returns the name example.com rather     than an error. This behavior can lead to privilege escalation in programs using the idna package. For     example, a program which performs privilege checks on the ASCII hostname may reject example.com but     permit xn--example-.com. If that program subsequently converts the ASCII hostname to Unicode, it will     inadvertently permits access to the Unicode name example.com. (CVE-2026-39821)

    Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can     be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.
    (CVE-2026-42502)

    Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive     CPU. (CVE-2026-42504)

    Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can     be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.
    (CVE-2026-42506)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1886 advisory.

    Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service.
    (CVE-2026-25680)

    Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can     be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.
    (CVE-2026-25681)

    Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can     be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.
    (CVE-2026-27136)

    The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-     only label. For example, ToUnicode(xn--example-.com) incorrectly returns the name example.com rather     than an error. This behavior can lead to privilege escalation in programs using the idna package. For     example, a program which performs privilege checks on the ASCII hostname may reject example.com but     permit xn--example-.com. If that program subsequently converts the ASCII hostname to Unicode, it will     inadvertently permits access to the Unicode name example.com. (CVE-2026-39821)

    Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can     be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.
    (CVE-2026-42502)

    Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive     CPU. (CVE-2026-42504)

    Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can     be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.
    (CVE-2026-42506)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1885 advisory.

    Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service.
    (CVE-2026-25680)

    Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can     be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.
    (CVE-2026-25681)

    Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can     be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.
    (CVE-2026-27136)

    (*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject     Alternative Name (SAN) entries. This caused strings.Split(host, .) to execute repeatedly on the same     input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of     SAN entries multiplied by the hostname's label count. Because x509.Verify validates hostnames before     building the certificate chain, this overhead occurred even for untrusted certificates. (CVE-2026-27145)

    The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-     only label. For example, ToUnicode(xn--example-.com) incorrectly returns the name example.com rather     than an error. This behavior can lead to privilege escalation in programs using the idna package. For     example, a program which performs privilege checks on the ASCII hostname may reject example.com but     permit xn--example-.com. If that program subsequently converts the ASCII hostname to Unicode, it will     inadvertently permits access to the Unicode name example.com. (CVE-2026-39821)

    Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can     be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.
    (CVE-2026-42502)

    Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive     CPU. (CVE-2026-42504)

    Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can     be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.
    (CVE-2026-42506)

    When returning errors, functions in the net/textproto package would include its input as part of the     error. This might allow an attacker to inject misleading content to errors that are printed or logged.
    (CVE-2026-42507)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69293 advisory.

    A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild     under the hood. Besides building images for local usage, it can also upload images directly to cloud.  It     is compatible with composer-cli and cockpit-composer clients.

    Security Fix(es):

    * golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass     (CVE-2026-27136)

    * golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting     (CVE-2026-25681)

    * golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree     rendering (CVE-2026-42502)

    * github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage:
    go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers     (CVE-2026-41178)

    * github.com/labstack/echo: Echo: Unauthorized Information Disclosure via URL Path Decoding Discrepancy     (CVE-2026-55677)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
348236	Oracle Linux 9 : ELSA-2026-67138-0: / image-builder (ELSA-2026-671380)	Nessus	Oracle Linux Local Security Checks	2026/9/18	2026/9/18	medium
321990	Amazon Linux 2 : runfinch-finch, --advisory ALAS2DOCKER-2026-132 (ALASDOCKER-2026-132)	Nessus	Amazon Linux Local Security Checks	2026/6/22	2026/7/3	high
322091	Amazon Linux 2023 : runfinch-finch (ALAS2023-2026-1886)	Nessus	Amazon Linux Local Security Checks	2026/6/22	2026/7/2	high
322109	Amazon Linux 2023 : credentials-fetcher (ALAS2023-2026-1885)	Nessus	Amazon Linux Local Security Checks	2026/6/22	2026/7/2	high
348689	RHEL 9 : osbuild-composer (RHSA-2026:69293)	Nessus	Red Hat Local Security Checks	2026/9/21	2026/9/21	high

检测

插件搜索

medium

high

high

high

high